FFIEC IT Examination Handbook BCM-VII.B: VII.B Exercise and Test Policy (Business Continuity Management)

Policies define exercise and testing expectations and strategies: key roles and responsibilities, minimum frequency, scope and reporting, consistent documentation, a process for correcting deficiencies, testing of communication and connectivity with third-party providers, and participation with critical providers so that personnel understand the integration with recovery processes.